Creating conditional policies in ProxySG using CPL

Products

• Management Center - VA
• Management Center

Issue/Introduction

We can create conditional policies using if statement.

Environment

Sometimes there is a requirement to write single CPL policy and apply it for different products, software versions, or enforcement domains through Management center.
It is also easier to maintain a single CPL instead of different CPL per product, version or enforcement domains.

Resolution

CPL allows you to segregate policies as below: 

1. Product specific policy:

#if product=asg
<CPL Rules>
#endif

#if product=sg
<CPL Rules>
#endif

1. Enforcement domain specific policy:

#if enforcement=appliance
<CPL Rules>
#endif

#if enforcement=wss
<CPL Rules>
#endif

1. Software version specific policy:

#if release.version=7.4.13.1
<CPL Rules>
#endif